HP Insight Orchestration vulnerabilities

4 CVEs affecting HP Insight Orchestration, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-3113, published 2015-06-23.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-3113: Adobe Flash Player Heap-Based Buffer Overflow Vulnerability, published 2015-06-23. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2022-04-13. EPSS: 99.8% chance of exploitation in the next 30 days. Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11.2.202.468 on Linux allows remote attackers to execute…
CVE-2010-1965, published 2010-07-15. High severity, CVSS 7.5. EPSS: 2.5% chance of exploitation in the next 30 days. Unspecified vulnerability in HP Insight Orchestration for Windows before 6.1 allows remote attackers to read or modify data via unknown vectors.
CVE-2010-4105, published 2010-11-02. Medium severity, CVSS 6.4. EPSS: 2.2% chance of exploitation in the next 30 days. Unspecified vulnerability in HP Insight Orchestration before 6.2 allows remote attackers to bypass intended access restrictions, and obtain sensitive information or modify data, via unknown vectors.
CVE-2010-4104, published 2010-11-02. Medium severity, CVSS 5.0. EPSS: 2.1% chance of exploitation in the next 30 days. Unspecified vulnerability in HP Insight Orchestration before 6.2 allows remote attackers to read arbitrary files via unknown vectors.